Overview

overview

10

Static

static

bba52befc0...93.exe

windows7_x64

1

bba52befc0...93.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bba52befc06eda6fcfced205f4dffa93.exe

  • Size

    159KB

  • Sample

    211220-kpv6eaahem

  • MD5

    bba52befc06eda6fcfced205f4dffa93

  • SHA1

    b303f812814162f950325369f103ce26d9cce730

  • SHA256

    1e2a19b62e2d8470f69398e17932a2b7577f9979543afd48acd5656e5f818a7a

  • SHA512

    16e03c3c97ca2c3148c3dbe916fb2ae92bcc3dac5cb856a9f0b37dc5cd403b76aa7bebf9c3c7bcec34d8c6acc64619e527872182235117533d362478e67d7a65

Score
10/10
njratevasionpersistencetrojan

Malware Config

Targets

    • Target

      bba52befc06eda6fcfced205f4dffa93.exe

    • Size

      159KB

    • MD5

      bba52befc06eda6fcfced205f4dffa93

    • SHA1

      b303f812814162f950325369f103ce26d9cce730

    • SHA256

      1e2a19b62e2d8470f69398e17932a2b7577f9979543afd48acd5656e5f818a7a

    • SHA512

      16e03c3c97ca2c3148c3dbe916fb2ae92bcc3dac5cb856a9f0b37dc5cd403b76aa7bebf9c3c7bcec34d8c6acc64619e527872182235117533d362478e67d7a65

    Score
    10/10
    njratevasionpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks